Web and Server Security Expert
Budget: $10 – $150 USD
We’re looking for a web and server security expert to help us with website and server vulnerability scans.
We’ve recently received a report from a scan that shows the following three vulnerabilities, but we don’t know which tool was used:
1. OpenSSH Authentication Bypass Vulnerability
Vulnerable SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.10 detected on port 22 over TCP.
2. OpenSSH Sensitive Information Disclosure Vulnerability
Vulnerable OpenSSH version for sshd(8) detected on port 22 over TCP - SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.10.
3. Web Server Uses Plain-Text Form-Based Authentication
80/tcp GET http://XX.XXX.XXX.XX:1/ (We will disclose the actual IP address after hiring).
We need an expert who can scan and confirm these three vulnerabilities. You will be required to help us install a vulnerability scanner that can produce the same report. We expect you to know which tool to use for this and help us set it up on our computer, which will require screen sharing.
You need to be available during EST business hours and have good spoken and written English.
You should be able to recommend fixes to mitigate the vulnerabilities. We will implement the fixes ourselves and then run another scan to ensure the vulnerabilities are resolved.
This is a time-sensitive task. The installation of the tool and the first scan needs to be completed by Monday at the latest. The fixes will be implemented on Tuesday and then we will run another scan to confirm everything is on the clear.
If we work well together, there might be more opportunities in the future.
We’ve recently received a report from a scan that shows the following three vulnerabilities, but we don’t know which tool was used:
1. OpenSSH Authentication Bypass Vulnerability
Vulnerable SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.10 detected on port 22 over TCP.
2. OpenSSH Sensitive Information Disclosure Vulnerability
Vulnerable OpenSSH version for sshd(8) detected on port 22 over TCP - SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.10.
3. Web Server Uses Plain-Text Form-Based Authentication
80/tcp GET http://XX.XXX.XXX.XX:1/ (We will disclose the actual IP address after hiring).
We need an expert who can scan and confirm these three vulnerabilities. You will be required to help us install a vulnerability scanner that can produce the same report. We expect you to know which tool to use for this and help us set it up on our computer, which will require screen sharing.
You need to be available during EST business hours and have good spoken and written English.
You should be able to recommend fixes to mitigate the vulnerabilities. We will implement the fixes ourselves and then run another scan to ensure the vulnerabilities are resolved.
This is a time-sensitive task. The installation of the tool and the first scan needs to be completed by Monday at the latest. The fixes will be implemented on Tuesday and then we will run another scan to confirm everything is on the clear.
If we work well together, there might be more opportunities in the future.